WPForce : Wordpress Attack Suite

[PayloadPilot]

WPForce is a suite of Wordpress Attack tools. Currently this contains 2 scripts - WPForce, which brute forces logins via the API, and Yertle, which uploads shells once admin credentials have been found. Yertle also contains a number of post exploitation modules.

To see this hidden content, you need to "Reply & React" with one of the following reactions: Like, Love, Haha, Wow

FEATURES:

• Brute Force via API, not login form bypassing some forms of protection
• Can automatically upload an interactive shell
• Can be used to spawn a full featured reverse shell
• Dumps WordPress password hashes
• Can backdoor authentication function for plaintext password collection
• Inject BeEF hook into all pages
• Pivot to meterpreter if needed

 

[adamylarbegos]

thanks